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Sir: 

Pursuant to 37 C.F.R. §§ 1.97 and 1.98, Applicants hereby submit an Information 
Disclosure Statement ("ipS") for consideration by the Examiner. The patents, publications or 
other information submitted for consideration by the Patent Office are listed on Form PTO-1449, 
attached hereto. Submitted herewith is a legible copy of (i) each foreign patent; (ii) each 
publication or that portion which caused it to be listed; and (iii) all other information or that 
portion which caused it to be listed. 

Except as may be indicated below, all of the patents, publications or other information are? 
in the English language, a copy of which is attached hereto and therefore, a concise explanation 
of each reference is not required. The following additional information is provided for the 
Examiner's consideration. 
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I hereby certify that this correspondence is being deposited with the United States Postal Service as first ° g 
class mail in an envelope addressed to: Mail Stop Amendment, Commissioner for Patents, P.O. Box 3 
1450, Alexandria, VA 22313-1450, on September 2, 2005. | 
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Docket No. 05456.105008 



To assist the Examiner in reviewing this IDS, the Applicants have conducted a key word 
search of each U.S. patent and U.S. patent application publication listed on the attached Form 
PTO-1449. The Applicants used the following search terms in his query of the U.S. patents and 
U.S. patent application publications: (1) "computer$"; (2) "intrusion$", (3) "detect$", (4) 
"(classif$ or type or types)", (5) "(proced$ or respon$ or log or logged or logs)" and (6) "(store$ 
or save or saved or record$)." The Applicants used Boolean logic when performing this search 
in which each term was linked by the logical connector "AND." A search of these U.S. patents 
and U.S. patent application publications using the aforementioned terms and Boolean search 
logic yielded the following results (44 patents and 9 publications): 



U.S. PATENTS 

U.S. Patent No. 5,278,901 to Shieh et al. 

U.S. Patent No. 5,414,833 to Hershey et al. 

U.S. Patent No. 5,440,723 to Arnold et al. 

U.S. Patent No. 5,557,742 to Smaha et al. 

U.S. Patent No. 5,623,601 to Vu 

U.S. Patent No. 5,812,763 to Teng 

U.S. Patent No. 5,905,859 to Holloway et al. 

U.S. Patent No. 5,919,258 to Kayashima et al. 

U.S. Patent No. 5,991,881 to Conklin et al. 

U.S. Patent No. 6,070,244 to Orchier et al. 

U.S. Patent No. 6,088,804 to Hill et al. 

U.S. Patent No. 6,185,689 to Todd, Sr. et al. 

U.S. Patent No. 6,275,942 to Bernhard et al. 

U.S. Patent No. 6,279,1 13 to Vaidya 

U.S. Patent No. 6,282,546 to Gleichauf et al. 

U.S. Patent No. 6,298,445 to Shostack et al. 

U.S. Patent No. 6,301,668 to Gleichauf et al. 

U.S. Patent No. 6,321,338 to Porras et al. 

U.S. Patent No. 6,324,647 to Bowman-Amuah 

U.S. Patent No. 6,324,656 to Gleichauf et al. 

U.S. Patent No. 6,347,374 to Drake et al. 

U.S. Patent No. 6,353,385 to Molini et al. 

U.S. Patent No. 6,405,318 to Rowland 

U.S. Patent No. 6,405,364 to Bowman-Amuah 

U.S. Patent No. 6,408,391 to Huff et al. 

U.S. Patent No. 6,415,321 to Gleichauf et al. 

U.S. Patent No. 6,453,345 to Trcka et al. 

U.S. Patent No. 6,460,141 to Olden 
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The Applicants exerted this additional time and effort to help the Examiner so that if a 
patent is ever issued on this patent application, third parties will understand that the Applicants 
submitted the attached prior art on a good faith basis. The Applicants recognize that the attached 
prior art is voluminous but it is not the Applicants' intent to "bury" any patents that maybe more 
pertinent than other ones. The Applicants do not want to dismiss any reference that he is aware 
of as cumulative in order to prevent third parties from arguing that the Applicants intentionally 
did not submit any prior art in an effort to deceive the Examiner and the Patent Office. 



any of a final action under 37 C.F.R. § 1.113, a notice of allowance under 37 C.F.R. § 1.311, or 
an action that otherwise closes prosecution in the application. No certification is required. The 
Commissioner is authorized to charge the $180.00 fee set forth in 37 C.F.R. § 1.17(p) to Deposit 
Account No. 11-0980. Please charge any additional fees pursuant to 37 C.F.R. §§ 1.16 or 1.17 to 
Deposit Account No. 11-0980. 

If the Examiner has any questions concerning this IDS, he is requested to contact the 
undersigned. If it is determined that this IDS has been filed under the wrong rule, the Patent 
Office is requested to consider this IDS under the proper rule (with a petition if necessary) and 
charge the appropriate fee to Deposit Account No. 1 1-0980. 

Enclosures: Respectfully submitted, 

1. Form PTO- 1449 

2. Foreign Patents KING & SPALDING LLP 



This IDS is being filed under 37 C.F.R. § 1.97(c)(2), before the mailing date of 



3. Publications 

4. Postcard 
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' U.S. PATENTS 

U.S. Patent No. 6,477,651 to Teal 

U.S. Patent No. 6,484,203 to Porras et al. 

U.S. Patent No. 6,487,666 to Shanklin et al. 

U.S. Patent No. 6,499,107 to Gleichauf et al. 

U.S. Patent No. 6,578,147 to Shanklin et al. 

U.S. Patent No. 6,606,744 to Mikurak 

U.S. Patent No. 6,647,400 to Moran 

U.S. Patent No. 6,681,331 to Munson et al. 

U.S. Patent No. 6,704,874 to Porras et al. 

U.S. Patent No. 6,708,212 to Porras et al. 

U.S. Patent No. 6,711,127 to Gorman et al. 

U.S. Patent No. 6,711,615 to Porras et al. 

U.S. Patent No. 6,792,546 to Shanklin et al. 

U.S. Patent No. 6,816,973 to Gleichauf et al. 

U.S. Patent No. 6,839,850 to Campbell et al. 

U.S. Patent No. 6,871,284 to Cooper et al. 

U.S. Patent No. 6,912,676 to Gusler et al. 



U.S. Patent Application Publications 

U.S. Patent Application Publication No. 2001/0034847 to Gaul, Jr. 

U.S. Patent Application Publication No. 2002/0032717 to Malan et al. 

U.S. Patent Application Publication No. 2002/0032793 to Malan et al. 

U.S. Patent Application Publication No. 2002/0035698 to Malan et al. 

U.S. Patent Application Publication No. 2002/0138753 to Munson 

U.S. Patent Application Publication No. 2002/0144156 to Copeland, JJJ 

U.S. Patent Application Publication No. 2003/0088791 to Porras et al. 

U.S. Patent Application Publication No. 2003/0212903 to Porras et al. 

U.S. Patent Application Publication No. 2004/0010718 to Porras et al. 

The Applicants submit that these search terms cannot be interpreted as providing 
emphasis on these terms when the claims are interpreted and construed by both the Examiner and 
the courts. The Applicants merely selected these terms to identify the prior art that may be more 
relevant than prior art that do not contain these search terms. 

To further assist the Examiner, the Applicants have organized each of the U.S. Patents 
and U.S. Patent Application Publications according to classification. For the non-U.S. patent 
prior art, the Applicants have annotated Form PTO-1449 with the location of each document in a 
respective box. 
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FORM PTO-1449, Adapted 

LIST OF INFORMATION DISCLOSED BY APPLICANT 

( Use several sheets if necessary) 


ATTY. DOCKET NO. E SERIAL NO. 

05456.105008 /® \ 09/685,285 


FILING DATE 

October 10, 2000 


APPLICANT / ^ Cl Si 

John M. Hammer et al. £?/ 


GROUP 

2135 


U.S. PATENT DOCUMENTS 


EXAMINER 
INITIAL 




DOCUMENT NUMBER 


DATE 


NAME 


CLASS 


SUBCLASS 


FILING DATE 
IF APPROPRIATE 




AA 


5,696,486 


12/9/97 


Poliquin et al. 


340 








AB 


6,353,385 


3/5/02 


Molini et al. 


340 








AC 


5,353,393 


10/4/94 


Bennett et al 


345 








AD 


6,429,952 


8/6/02 


Olbricht 


358 








AE 


5,748,098 


5/5/98 


Grace 


370 








AF 


6,396,845 


5/28/02 


Sugita 


370 








AG 


6,711,127 


3/23/04 


Gorman et al. 


370 








AH 


5,734,697 


3/31/98 


Jabbarnezhad 


379 








AI 


6,104,783 


8/15/00 


DeFino 


379 








AJ 


6,226,372 


5/1/01 


Beebe et al. 


379 








AK 


6,445,822 


9/3/02 


Crill et al. 


382 








AL 


6,563,959 


5/13/03 


Troyanker 


382 








AM 


6,618,501 


9/9/03 


Osawa et al. 


382 






















































FOREIGN PATENT DOCUMENTS 






DOCUMENT NUMBER 


DATE 


COUNTRY NAME 


TRANSLATION 
YES NO. 


OTHER REFERENCES (Including Author, Title, Date, Pertinent Pages, Etc) 


EXAMINER DATE CONSIDERED 


EXAMINER: Initial if reference considered, whether or not citation is in conformance with MPEP 609; Draw line through citation if not in 
conformance and not considered. Include copy of this form with next communication to applicant. 
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ATTY. DOCKET NO. SERIAL NO. 
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FILING DATE 

October 10, 2000 


APPLICANT 

John M. Hammer et al. 


GROUP 
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U.S. PATENT DOCUMENTS 


EXAMINER 
INITIAL 




DOCUMENT NUMBER 


DATE 


NAME 


CLASS 


SUBCLASS 


FILING DATE 
IF APPROPRIATE 




AN 


6,628,824 


9/30/03 


Belanger 


382 








AO 


6,647,139 


11/11/03 


Kunii et al. 


382 








AP 


6,661,904 


12/9/03 


Sasich et al. 


382 








AQ 


6,668,082 


12/23/03 


Davison et al. 


382 








AR 


6,668,084 


12/23/03 


Minami 


382 








AS 


6,792,144 


9/14/04 


Yan et al. 


382 








AT 


5,345,595 


9/6/94 


Johnson et al. 


455 








AU 


6,278,886 


8/21/01 


Hwang 


455 








AV 


6,889,168 


05/03/05 


Hartley et al. 


702 








AW 


5,210,704 


5/11/93 


Husseiny 


702 








AX 


5,842,002 


11/24/98 


Schnurer et al. 


703 








AY 


5,854,916 


12/29/98 


Nachenberg 


703 








AZ 


5,999,723 


12/7/99 


Nachenberg 


703 








BA 


6,067,410 


5/23/00 


Nachenberg 


703 








BB 


5,864,803 


1/26/99 


Nussbaum 


704 






















FOREIGN PATENT DOCUMENTS 






DOCUMENT NUMBER 


DATE 


COUNTRY NAME 


TRANSLATION 
YES NO. 


OTHER REFERENCES {Including Author, Title, Date, Pertinent Pages, Etc.) 


EXAMINER DATE CONSIDERED 


EXAMINER: Initial if reference considered, whether or not citation is in conformance with MPEP 609; Draw line through citation if not in 
conformance and not considered. Include copy of this form with next communication to applicant. 
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6,463,426 
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Lipson et al. 
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Antonaccio et al. 


709 
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